Security overview

• API keys are hashed at rest and can be revoked instantly.
• Agent wallets are isolated per agentId.
• Session management follows Better Auth defaults on the Valta web app.

Next steps

• Best practices